CVE-2026-75916

In SiYuan through 3.7.3, genHintItemHTML() in app/src/protyle/hint/extend.ts concatenates block name, alias, and memo fields into HTML without escaping, enabling XSS via '((' autocomplete popups. Combined with nodeIntegration enabled, contextIsolation disabled, and no CSP, this escalates to arbit...